Filegator

filegator

Vendor: Filegator • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-63358 1Filegator 1Filegator Aug 5, 2026 Jul 21, 2026 8.4 HIGH· v4 7.3 HIGH· v3 N/A· v2 FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an aut...Show more FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.Show less
CVE-2022-1849 1Filegator 1Filegator Jun 17, 2026 May 24, 2022 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.
CVE-2022-1850 1Filegator 1Filegator Jun 17, 2026 May 24, 2022 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.